New Solution Assists with the Identification and Loss Protection of Sensitive ERP Information across the Business Environment

Santa Clara, Calif. — November 21, 2011 — McAfee and Securonix LLC today announced the industry’s first data loss prevention (DLP) solution for Enterprise Resource Planning (ERP) systems such as SAP. The solution continuously identifies and fingerprints intellectual property and sensitive information held within the SAP environment for discovery, monitoring, and prevention by McAfee® Data Loss Prevention. Any activity and alerts produced are then correlated with access and activity data from within SAP to give a 360° risk view of the intellectual property. This means that sensitive data within SAP and flowing out of it can now be protected in every state (data in motion, data at rest, and data in use) via McAfee Data Loss Prevention.

“Our customers are increasingly anxious about the security of their ERP data and are looking for ways to get some level of visibility and control over its use,” said Marc Olesen, general manager of content and cloud security at McAfee. “McAfee recognized that in order to tackle this challenge, it not only needed a deep understanding of SAP from an information, access, and activity standpoint but that it would require some method to dynamically identify sensitive information as it changed within SAP. The combined McAfee and Securonix solution enables this application security management.”

McAfee and Securonix Approach to ERP Data Loss Prevention:

Automated IP identification and fingerprinting: Sensitive data is created and modified continuously in SAP with numerous methods available for the user to then extract and further manipulate the data for storage and transmission. The solution addresses this complexity through its understanding of SAP data and transaction structures, allowing it to create fingerprints of the sensitive data in an ongoing manner for input into McAfee Data Loss Prevention.

Comprehensive Discovery, Monitoring and Prevention: Armed with fingerprints of the sensitive data, McAfee Data Loss Prevention can discover where this sensitive data has been stored and replicated across the organization, monitor how it is being used on the network and the endpoint and prevent data loss via posting, storage, transmission, printing, and copying.

Business Context and Behavior Analytics: Theft of IP and sensitive information can be difficult to distinguish from normal or authorized activity due to complex user behavior such as data hoarding or complex user roles and responsibilities. The solution addresses this by correlating all DLP alerts with identity, access, and activity information pulled from SAP and the human resource system. This information is then analyzed for abnormal behavior patterns by comparing the user’s behavior to that of their peer groups. The result is a comprehensive view of information risk in business context that allows for detailed analytics and behavior analysis for focusing on the riskiest users, activity, and alerts.

“Globalization and the cloud are driving a whole new wave of data protection concerns and complex requirements for loss prevention,” said Sachin Nayyar, CEO of Securonix. “Our solution for the ERP market represents our commitment to solve these challenges that can also be applied across other key enterprise application platforms within healthcare, pharmaceuticals, manufacturing, and many more.”

McAfee and Securonix demonstrated the solution last month during the FOCUS 11 conference in Las Vegas. There will also be a webcast, “DLP for SAP: Protecting Critical Data” on December 7 to learn more about this innovative solution and how it is being used at a leading chemicals company.

About McAfeeMcAfee, a wholly owned subsidiary of Intel Corporation (NASDAQ:INTC), is the world's largest dedicated security technology company. McAfee delivers proactive and proven solutions and services that help secure systems, networks, and mobile devices around the world, allowing users to safely connect to the Internet, browse and shop the Web more securely. Backed by its unrivaled Global Threat Intelligence, McAfee creates innovative products that empower home users, businesses, the public sector and service providers by enabling them to prove compliance with regulations, protect data, prevent disruptions, identify vulnerabilities, and continuously monitor and improve their security. McAfee is relentlessly focused on constantly finding new ways to keep our customers safe. http://www.mcafee.com

About Securonix

Securonix provides the industry’s first Insider Threat and Risk Intelligence Platform. The Securonix Platform consumes activity, identity, and access information from critical systems or existing security tools and identifies high-risk users, activity, and access for focused, proactive management. The Securonix Engine uses powerful correlation, behavior, and access risk analytics to continuously enrich security information with valuable content and context. Securonix is used as an enterprise threat and risk intelligence platform or to simply get more context, focus, and value out of SIEM, DLP, logging, monitoring, or IAM solutions. http://www.Securonix.com

Note: McAfee is a registered trademark of McAfee, Inc. in the United States and other countries. Other names and brands may be claimed as the property of others.